Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/35f171-b98c-459b-b0b5-fbc404d8de3b/1/B2hGT1eFkagIo84BoxNvaIDMVIA.roa
File: B2hGT1eFkagIo84BoxNvaIDMVIA.roa (raw, json)
Hash identifier: 573/CB1s6/sMNo4YjJ1CvHqqPGc0rLf2pK2SmcbOPLw=
Subject key identifier: 07:68:46:4F:57:85:91:A8:08:A3:CE:01:A3:13:6F:68:80:CC:54:80
Certificate issuer: /CN=1bb3fde08b266939256311e1bb2c83e3b2019aa0
Certificate serial: 019FF1D75F0B274223860422A3B6079FA8AE
Authority key identifier: 1B:B3:FD:E0:8B:26:69:39:25:63:11:E1:BB:2C:83:E3:B2:01:9A:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G7P94IsmaTklYxHhuyyD47IBmqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/35f171-b98c-459b-b0b5-fbc404d8de3b/1/B2hGT1eFkagIo84BoxNvaIDMVIA.roa
Signing time: Tue 11 Aug 2026 17:20:51 +0000
ROA not before: Tue 11 Aug 2026 17:20:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 133752
IP address blocks: 178.16.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/35f171-b98c-459b-b0b5-fbc404d8de3b/1/G7P94IsmaTklYxHhuyyD47IBmqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/35f171-b98c-459b-b0b5-fbc404d8de3b/1/G7P94IsmaTklYxHhuyyD47IBmqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/G7P94IsmaTklYxHhuyyD47IBmqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 10:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f1:d7:5f:0b:27:42:23:86:04:22:a3:b6:07:9f:a8:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bb3fde08b266939256311e1bb2c83e3b2019aa0
Validity
Not Before: Aug 11 17:20:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0768464f578591a808a3ce01a3136f6880cc5480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:11:81:00:4e:d5:57:1a:85:b6:7e:fd:15:20:
2c:7b:07:12:c5:7e:22:63:96:14:35:d9:fd:61:09:
1b:1d:c4:60:d0:fc:44:23:4b:2c:c2:a7:26:f7:52:
ce:17:b2:d2:bc:5c:ad:5a:ba:b9:c8:23:21:41:c9:
61:42:7d:84:50:42:95:f4:d9:56:b4:d0:e3:6b:64:
e2:87:fd:27:aa:f0:9d:d6:d0:46:de:99:2a:3b:cb:
a7:f4:6f:30:f0:81:0f:f5:72:94:a2:5e:d2:36:d1:
58:1c:2b:c7:22:b2:c5:13:91:79:21:60:b9:97:a9:
f6:b4:98:a6:27:86:b7:d2:66:1e:d8:de:07:8e:d4:
3f:66:92:67:a3:a1:97:26:df:cb:a6:47:a4:92:5b:
79:5d:8d:88:a4:f1:cf:9c:c7:9e:ba:9e:4e:11:3c:
3c:05:70:8f:91:7a:d2:5e:f9:95:a9:02:ea:96:cd:
da:c1:73:15:46:cf:9e:8c:0a:ca:00:d2:3e:ae:6f:
b5:6c:fa:43:8b:bf:f9:58:f2:78:e0:49:34:23:63:
8f:8e:58:c6:14:6d:76:17:3a:80:0a:aa:a9:60:9a:
f9:e7:6e:1a:08:5f:cd:d4:da:2e:c8:d6:ca:a3:b9:
89:9c:e6:f4:5a:a1:c4:5d:b8:86:3a:d3:6c:4f:64:
d7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:68:46:4F:57:85:91:A8:08:A3:CE:01:A3:13:6F:68:80:CC:54:80
X509v3 Authority Key Identifier:
keyid:1B:B3:FD:E0:8B:26:69:39:25:63:11:E1:BB:2C:83:E3:B2:01:9A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7P94IsmaTklYxHhuyyD47IBmqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/35f171-b98c-459b-b0b5-fbc404d8de3b/1/B2hGT1eFkagIo84BoxNvaIDMVIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/35f171-b98c-459b-b0b5-fbc404d8de3b/1/G7P94IsmaTklYxHhuyyD47IBmqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.16.235.0/24
Signature Algorithm: sha256WithRSAEncryption
94:bc:54:55:b0:0b:30:ac:d5:27:7c:c4:ee:02:6a:56:d8:a7:
f5:10:e7:76:ad:85:01:a5:a9:f7:ab:d9:33:1f:be:4e:15:e0:
16:6f:97:b4:fe:10:31:b2:54:db:65:73:20:61:0c:7c:a0:32:
cd:7c:c8:15:65:df:fa:ac:df:05:4d:3e:3f:0c:43:f9:26:42:
39:e3:b3:9f:ca:a9:8e:8c:70:7a:3d:79:2f:9a:d7:de:06:b2:
6d:03:cf:2c:34:6a:7e:ff:38:ed:14:e1:86:87:57:f0:25:04:
d3:1f:60:5c:dd:ee:c6:de:b4:dc:c7:4d:7e:46:aa:19:dc:03:
ff:31:d6:51:a2:64:38:a4:67:44:21:e8:07:52:e3:e1:b5:1e:
b1:bc:84:33:b6:d2:85:32:ae:cc:77:f8:ff:ae:61:51:fc:3f:
c3:d5:09:e7:2a:a1:30:40:28:89:5b:d9:87:23:d8:5d:80:ba:
6b:40:17:06:a5:ce:e5:30:1e:0c:bf:f5:77:59:f7:05:ad:30:
97:25:89:91:4b:02:85:db:7a:ba:94:eb:e2:cd:96:18:7d:20:
54:45:0e:3c:d8:12:40:d0:00:9b:26:71:68:9d:e8:c9:d9:3e:
10:80:aa:e3:f1:d3:a1:b0:f6:35:c5:cd:59:db:9b:b4:45:af:
ec:68:5f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 16:12:56 2026 by rpki-client